| VID |
22478 |
| Severity |
30 |
| Port |
8880, ... |
| Protocol |
TCP |
| Class |
CGI |
| Detailed Description |
A version of IBM WebSphere Application Server which is older than 6.0.2.33 is running on the host.
IBM WebSphere Application Server 6.0.2 before Fix Pack 33 appears to
be running on the remote host. Such versions are reportedly affected
by multiple vulnerabilities :
- Provided an attacker has valid credentials, it may be possible to hijack an authenticated session.
- The PerfServlet code writes sensitive information in the 'systemout.log' and ffdc files, provided Performance Monitoring Infrastructure (PMI) is enabled.
- It may be possible to login to the administrative console using a user account that is locked by the operating system.
- An unknown vulnerability affects z/OS-based IBM WebSphere application servers.
- An unspecified vulnerability in the administrative console could allow arbitrary file retrieval from the remote system.
- If APAR PK41002 has been applied, then an unspecified vulnerability in JAX-RPC WS-Security component could incorrectly validate 'UsernameToken'.
- Certain files associated with interim fixes for Unix-based versions of IBM WebSphere Application Server are built with insecure file permissions.
* Note: This check solely relied on the banner of the remote Web server to assess this vulnerability, so this might be a false positive.
1) An unspecified error exists in wsadmin within the Administrative Scripting Tools component. No further information is currently available.
2) An unspecified error exists within the PropFilePasswordEncoder utility. No further information is currently available.
3) The problem is that certain sensitive information are stored in clear text within the http_plugin.log file (Plug-in component) and startserver.log (System Management/Repository component).
* References:
http://www-01.ibm.com/support/docview.wss?uid=swg27006876#60233
http://www-01.ibm.com/support/docview.wss?uid=swg1PK67909
http://www-01.ibm.com/support/docview.wss?uid=swg24022693
* Platforms Affected:
IBM WebSphere Application Server versions prior to 6.0.2.33 |
| Recommendation |
Upgrade to the latest version of IBM WebSphere Application Server (6.0.2.33 Fix Pack 33 or later), available from the IBM Support & downloads Web site at
http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg27004980 |
| Related URL |
CVE-2009-0891,CVE-2009-0506 (CVE) |
| Related URL |
34330,33884 (SecurityFocus) |
| Related URL |
(ISS) |
|
